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In the following will be given a description' of the Enigma, * 
then a case will be described where one succeeded in deciphering a 
message encipnered by the Enigma and determining the wiring of the 
machine. In describing the Enigma use will be made of the concept 
of substitutions and an attempt made to present this concept to non- 
mathematicians, for what is said about substitutions and their com- 
position might be of use in other decipherments, especially in 
.treating other machines. 

V. 

* 

i I. Description of the Enigma 

s 

| 1, The cipher wheels 

The cipher wheels constitute the chief part of the Enigma and 
are constructed as follows; on each side of a round dist of insu- 
N ^ating material are arranged in a circle 26 contacts; on one side 
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v there are metal discs, on the other side metal spring contact pins. 
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, fiach contact on one side is connected by wiring through the disc with 
l a' contact on the other side. The choice of the contacts to be con- 
hoifted is termed the wiring (schaltung) of the wheel. To designate 
ih©^ wiring the contacts of the two rings of contacts are assigned 

rs 1 - 26 (progressing clockwise when one looks at the side with 
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the 1 ' spring contacts}, contacts standing opposite each other having 

the same number. The wiring may then be expressed as follows; 

i t V/4 3 +-rt7t9 t° u ** ** ** * nan** <** *3 m 

rW <2/ + J /T /o n a * f 4 + J+ M A fi r ** * s ' f * *■***? ? J 

In the upper line are the numbers of the contact pins, in the lover 
those ft the flush contacts paired with them. Fin 1 is here con- 
nected Ho flush contact 11, pin 2 with flush contact 21, ... pin 26 
with flush contact 7- We treat W, as usupl, as a substitution, l.e. 
as an operation which replaces number 1 by number 11, 2 by 21, etc. 
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2. St e wiring of a sequence of two wheels 


Fig. *1 allows In schematic foira two Wi.ee la a and B which are so 
mounted tnat tne pins of wheel B contact Ire like numbered flus-u 
contacts of v~eel A. These wleels nave 6 rather tnan 26 contacts; 
for simplicltj we shall use 6 rather t) an 26 contacts in our examples 
since everjti ing essential will be revealed as well. The substitu- 
tions produced by the two vx eels are 

a «A 2M56) and R ./l23456) 

A ^3 1 6 5 2 kj “ B 1 3 6 2 5/ 

On© sees that Wi en mounted together tl ej produce the substitution 



Permutation P is termed the product of A and B: P = A-B. The pro- 
duct A-B is computed from A and B as follows: An^ number is trans- 
posed according to substitution A* then the result is transposed 
again according to B. In our example in A number 1 is replaced b^ 

2 and in B 5 is left unchanged, i.e. P replaces 1 tj 3, 2 is changed 
to 1 bj. substitution A and B changes 1 to 4, hence in tlx© product AB 
2 changes to 4, etc* naturally it is universally true that when two 
wheels are mounted together the product of tne pertinent substitutions 
is generated. 

)ne speaks of a product in the formation of AB because certain 
properties hold for tnis calculation which are familiar from ordinary 
multiplication of numbers* One can, for instance, add after A and 
B a third wlietl C with a substitution we will call C. The substitu- 
tion generated by tlie three wheels can be calculated by regarding 
wheels A and B together as a new wheel F and thus getting the re- 
sultant wiring of F and 0. The pertinent substitution is FC * {AB)C. 
But one can also take B and C together as 0 and then has AO * A(BC). 
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In both cases one lias the same substitutions A(BC) * (AB)C. We can 
now shorten our expression to ABC* In like manner the products of 
more than three factors can be defined* The lav involved in the 
equation (AB)C * A(BC) is called the associative law* This law, 
namely tliat in multiplying one may croup the factors in any order. 

Is well known from tne formation of products of ordinary numbers* 

One law for the products of numbers does not hold for the 
multiplication of substitutions. In general AB is different from BA 
(this Is also true in our example) * Hence In our product everything 
depends on the sequence of the factors. Two substitutions A and B 
for whicn the equation AB * BA holds good are termed commutative* 

Thus far is our discussion of the wirings we have started with 
the contact pins and considered the connections to the flush con* 
tacts, i.e. we have so to speak been running through the cylinder in 
the direction from the pins to the flat contacts. We can now choose 
the other direction. The substitution which tne cylinder with wiring 
W yields we will designate V*’*’. One derives W” 1 from W, as is 
readily seen, by transposing the lines and then rearranging the num- 
bers of the new up. er line in their normal sequence. One recognizes 


at once that 

W W 1 » V- 1 V * E = (l || l I % 


25 26 
25 26 


) 


The substitution £, which converts each number Into Itself, Is 
termed the identity substitution. Substitution W* 1 is termed inverse 


to w. 
A 
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In our example 

2 3 4 5 6 ) 

5 16 43 / 


and A** 1 A * A A’ 1 = 


One can readily verify the rule (AB)"* 1 


(i 


2 3 4 5 6 
2 3 4 5 6 


B- 1 A" 1 . 
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3. The turning of a wheel 

Let wheel A be mounted between two discs and Sg so that It 
can revolve . Let discs and Sg each have a circle of 6 contacts 
corresponding to those of a* Let these contacts be numbered X - 6 In 
such fashion that like numbered contacts of Si and Sg are opposite 
each other. If A is placed so that each contact pin of A touches 
the correspondingly numbered contact of 8^ (and consequently flush 
contacts of A accord In number with contacts of S 2 ) then the con- 
tacts of and Sg are connected through wheel A according to the 

substitution of wheel A# l.e. If one interprets the upper line in 

A3 /l 2 3 4 5 6 ] 

(3 1 6 5 2 *; 

as the numbers of the contacts of and the lover line as the num- 
bers of the contacts of S 2 , then the vertical pairs represent the 
contacts connected with one another. 

If one turns wheel a 1/6 of a complete revolution so that now 
contact 2 of A touches 1 of and S 2 etc., the contacts of Sj and 

Sg are now connected according to the substitution 

q=( / 1S3456 } 

H ( 654152 / 

As on© easily figures out, Q * Z A where Z means the substitu- 
tion /g that permutation where each term is re- 

placed by the next higher and the last by 1. According to 2., 

Z -1 - / 123456 ) 

(,6 12 3 * 5 ) 

One calls Z a cyclic substitution and writes also 2 = (1 2 3 4 5 6 ), 
The rule confirmed for our case holds good generally only that 
in the case of 26 contacts we write Z»(123... 25 26 ). For if 
the substitution of the vheel is where (i, i* • 1 , 2 , ..., 26 ), 
then in the initial position contact i of is connected with con- 
tact 1 * of Sg; and after 1/26 revolution contact 1 of is connected 
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■with (I *fl)* - 1 of Sgi that however means that after the motion 
ve have the substitution Z** 1 , If one turns another 1/26 of 

a revolution one gets the permutation Z z -l z ~i s z 2 ^ 

in general after k turns one gets Z k ^J*) Z~ k where 7 k signifies a 
product of k factors Z and z~ k = it is easy to see that 

z 26 = E. 
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4. The reversing wheel 

A further unit of the Enigma is the so-called reversing wheel 
( t&nkehrwalze ) . It is similar to the cipher wheels In construction 
but has only one set of contacts* These contact pins are wired up 
two by two through the interior of the wheel. Tills whee3 also can 
be assigned a substitution by writing the numbers of the pins In the 
upper line and in the lower line beneath each one the number to which 
it Is wired. If below I of the upper line we find 3c, obviously be- 
low k we must find 1, since the two are connected* Prom this it , 
follows that: If U is the substitution associated with the reversing 
wheel, U = IT 1 , therefore U 2 * E* 


5* The operation of the Enigma 
m the Enigma there are three cipher wheels A® B, C and a re- 
versing wheel tJ one alongside the other (cf. figure 5). These turn 
on an axle* On the disc S are 26 contacts which are connected to a 
keyboard like that of a typewriter and also to 26 lamps* The keys 
are marked with the 26 letters of the alphabet and each lamp lights 
to a letter on a glass plate. 

If one depresses a key, say x, current enters through the 
corresponding contact of the end plate S Into the maze of wheels . 

It traverses these in the order A— > 0 -*C ~*B — ?A and comes 
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out at some definite contact of s. The lamp vired to this contact 
lights up some letter, say y. Conversely if one presses key y the 
letter x lights up. In other words a reciprocal T g g (26 letter sub- 
stitution alphabet) is produced. 

After what has already been said it is not hard to compute the 
substitutions corresponding to this T g g, l.e. that substitution 
which shows how the contacts of S (end plate) are connected through 
the cipher wheels and reversing wneel. If A, B, C, and U stand in 
the basic position, l.e, so that all contacts touch like numbers, 
the corresponding substitution is 5 

F = A B 0 U C' 1 B' 1 A” 1 . 

If one wheel Is advanced one step, l.e. so that contact 2 of A 
touches contact 1 of s and B, then according to (3) the substitution 
A is replaced by Z A Z"* 1 ; similarly when other wheels move. 

How If one moves wheels A, B, and G by and ^ of a 

full revolution, one gets the substitution 
Pfc.l.m “ (Z k AZ~ k ) (Z^BZ -1 ) (Z%)2f m MzV V“) (zW l ) (Z W*) . 

To abbreviate we write * (k,l,m) and note that by Z° we under- 

stand the Identity permutation E. 

Thus there exists a one-to-one correspondence between the 
hitherto considered substitutions of the numbers 1-26 and the T g g, 
The association of the numbers with the letters depends on the con- 
nection of the contacts of S with the keys and lamps. In the usual 
commercial form of the Enigma the numbers 1, 2, 25, 26 of the 

series are associated with the letters qwertsuioasdfgh 
jkpyxevbnml. This sequence comes from the arrangement of 
the keys on a typewriter. The Enigma we worked on had a like arrange- 
ment, however one could readily have determined any other. 
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A drive mechanism coupled with the keys of tne Enigma causes 
wheel a to move forward 1/26 of a revolution each time a key Is de- 
pressed and wheels B and C to move In a fixed maimer* Starting with 
£.0,0,0? the machine generates successively the following substitu- 
tion alphabets: * 

*1 * [0,0,0] *653. * ^,0,1] p 1301 * • - 

p 2 - [1,0,0] p 652 » &,o,ij ; ; ; 

I ; 

p 26 * r«5,i,oj : - • 

P27 ■ Lo.i,c j p 677 ■ 5,1,3] ; : : 

p 648' ; 'i2?i24,o] j : : : 

*649 s [ a4 »24,0] P 1299 « [24,84,1] • * * 

*650 3 l 2 5.25,0] Pi300= [25,25,3? P 1950 5 fe5,25,2j ! I 

: : : : p i 5 6oi a p i6 25 i s 

* ♦ • • P 15602 “ [l,0,24| *16252 * &,0 # 25j 


p 16249 * [24,24,24] p 3.6899 * fe4.24.25] 

P ieS S ^25,241 p|g5 «fe5,25,25j 


These permutations repeat themselves periodically from here on, l.e» 
*16901 s p l * *16902 s p 2 * • 


Bote: Observe that 

1) wheel A causes wheel B to move between positions 24 and 25, 

2) wheel B normally causes wheel 0 to move between 25 and 0, and 

3 ) the motion of any wheel effects the simultaneous motion of all 
wheels to its left (in our scheme)* 
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Encipherment with the Enigma proceeds by striking successively 
the keys c orre spending to the plain text letters and copying off 
the corresponding cipher text letters revealed by the lamps* She 
first plain text letter will therefore be enciphered with the T 2 g 
pertaining to P^, the second with that pertaining to P 2 , etc. Since 
the substitutions P^ and hence the T 2 g are reciprocal , decipherment 
proceeds in like manner, typing the cipher text and reading off 
the plain text* Of course encipherment and decipherment must both 
be made with the same original setting. 

Bach of the four wheels of the Enigma has around Its edge a 
ring with the 26 letters of the alphabet. These rings serve to 
establish the setting of the wheels* This setting of the machine. 
Indicated by four letters. Is termed the *' outer setting." For 
this outer setting one has 26^ possibilities. 

These letter rings are so attached to the real cipher discs 
that they can be rotated* The notches In which the drive mechanism 
engages are firmly united with the letter rings* For the setting 
of the letter rings with respect to the cipher wheel proper there 
are also 26^ possibilities; each such setting Is likewise Indi- 
cated by a grox^p of four letters. This is known as the "Inner 
setting." 

A further possibility of variation of the machine exists In 
the six possible arrangements of the three wheels A, S, and C* 

Finally we may point out that in the Enigma the wheels are 
arranged In reverse order of figure 3, i.e. the disc S (end plate) 

Is at the right and the reversing wheel at the left* Of course 
what has been said holds good for this sequence* Our figure Is 
drawn to accord as far as possible with the text* 
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XX. Determining the wiring of an 
from a sequence of T q6 (substitution alphabets) 

1. Cryptanalytie foundation 

©lore was at hand a considerable number of messages which had 
thoughtlessly been enciphered with the same inner and outer initial 
setting. Hbnce it was possible by superiiqposing the telegrams to 
solve the individual T^g 1 s (substitution alphabets) column by 
column, in doing wliich one could also make use of the fact that 
these Tgg’s must be reciprocal. In this way one obtained a series 
of 50 - 150 successive T^g’s, some of them with gaps. For each 
of these sequences the outer setting was known for part of 
them the inner setting was also known, as well as the wheel order 
in the original machine. Sphere was also a surmise as to the 
wiring of tue reversing wheel 0 wiilch eventually proved to be 
oorrect. However, even without this guess, the wiring of 0 could 
have been figured out mathematically. 

2. Theoretical calculation of tlie wheel wiring 
To present first the principle 1 Involved in calculating the 
wirings A, B, 0, and 0, we consider as given a sufficiently long 
series F of successive Tgg's produced by the machine. The Tag's 
or the substitutions of this sequence we designate P^, P g , ..... 
without limiting generality, we can assume that P^ is the first 
permutation after a simultaneous movement of wheels B and C; since 
our sequence F was presumed to be of adequate length, such a sub- 
stitution surely occurs therein and in what follows we might 
examine only the portion beginning tnere. With the numbering of 
the contacts assigned in I, it was purely arbitrary which contact 
was assigned ti*e number 1. Still making use of this liberty, we 
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may furtner assume that P x « [o,0,o] . This brings our notation 
Into harmony vita I 5* Accordingly 
p x = A(Bcn<r 1 B‘ 1 )A~ 1 
P 2 = 2AK' 1 (BCnO' 1 B" 1 )ZA' 1 2" 1 . 

One sees that the central term in parenthesis is the same in 
both equations, which is clear since in passing from to P 2 
only wheel a advanced one step. The fact that in passing from P x 
to ? 2 only wheel A is involved (and this in a known manner), makes 
it comprehensible tnat one can deduce from P x and Pg together 
certain properties of wheel A. Zt appears that by adding a few 
more pairs of successive substitutions it is even possible to 
calculate A almost completely. Once A is known, one can form 
from p a new sequence G which is no longer dependent in any way 
on A, viz.j 

= A^PjA = B(CnC _1 )B -1 - 
027 = A -1 P S7 A = ZBZ“ 1 (CU0' 1 )ZB" 1 Z“ 1 

Qg 51 = A^PggjA = BtZCZ-^-BZO^-ijB' 1 
0677 * A“ X P677A = ZBZ" 1 (ZCZ' 1 nZC _1 Z" :L )ZB" ;l Z- ;I - 

This sequence ean be used in corresponding fashion to calculate B. 
STsing a third sequence, which is not dependent on B, C is figured, 
and finally tr. 

Carrying out these calculations in detail calls for a cer- 
tain amount of practice in using the symbols here introduced. 
Moreover, since too full a description would make it difficult to 
take in quickly, we will assume down to the end of this section 2 
some familiarity with substitutions and express ourselves some- 
what more briefly in presenting our calculations. 
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'With X = AZA -h.~ l v© get X“ 1 P 1 X * Pg „ 

tfith tills equation X Is determined except for a lefhaaad factor 
which is commutative vita F^; 1.©., If 

X = P 2 and on© assumes X * XX then 

« X'^'^XX = x'h^x, therefore X'^X = P x , 
!•©•# KF^ - P X X . Llkewlee we have the equation 
X lp 27 X S *28. 


By tals equation X is determined except for a lefthand factor 
which, is commutative witn P . The two equations X^F.X * P 2 and 
X-P 2 .Xr p 2 g determine X except for a lefthand factor which is 
commutative with boti P x and P 27 . How if there is a set M of 
substitutions, P m with m * 26n - 1, such that the identity is the 
only substitution commutative with all F^, then by the equation 


= P m+ 1 , 

where P m runs tiirough. all the substitutions of M, X is uniquely 
determined. 

This case lias occurred in all examples which liave actually 
come up. The set M consisted of from three to five substitutions. 
If X is determined one gets from X « aza" 3 ^* 1 

XZ - AZA" 1 . 

This equation determines A except for a power of Z as a rlghthand 
factor, since a cycle Is commutative only with its powers. 

A cannot be determined .more exactly by sequence F alone, for 
with every choice of A among the 26 possibilities B, C, and TJ can 
be so determined as to generate sequence F. That A cannot be 
thus determined uniquely is clear; conceive of the wheels as con- 
structed of pliable material, then one could, for example, twist 
the two sides of wheel A with respect to one another; a like 
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twisting of wheel B would condensate for this, however. Such a 
twisting would exactly correspond to the replacement of A by AZP* 
For the following we select as A one solution from among those 
possible for XZ = AZA~^. From sequence F we now form the sequence 
G mentioned In the beginning: Q^, Q^, ..... From 

the pairs Qj, Qg^j Qg^, Qg 77 ; .... we derive first Y = BZB~ 1 Z'‘ 1 . 
From this we get Bj what was said about the non-uniqueness of the 
solution for A holds for B. 


To determine C we cannot proceed In exactly analogous fashion. 
We form tne sequence 

a x = = cue -1 

*651 s b ~ 1q 651 b b zcz-^zc-^- 1 

RijOl s B " 1 q X301 B * Z 2 CZ" 2 0Z S C* 1 Z" 2 

As one readily calculates, with V * CZC"*Z -1 

V^R V 

1 651 

v-^z-^iZjv = z-\ 301 z 


V-1(Z-2H 1301 Z2)V » Z- 2 R 195l Z 2 

• 

From these equations one can determine V and from that C. 

Finally 0 can be determined, e.g. from R^s U » C ml R x 0. 

The metnod employed here to determine c can also be used to 
determine A and B. Carrying this out by this method calls for 
more computation but one can succeed with fewer members of a se- 
quence, which In practical application Is a great advantage. 

2. Practical calculation of the wheel wirings. 

As already mentioned, our sequences of * 26 '* contained only 
some 50 terms. Consequently by the method given In 2. one could 
at most determine the two wheels at the left (cf. Fig. >}* l.e. 

A and B, and to get B It was necessary to use the method described 
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at the end of 2 * But the sequence a anticipated did not all corres- 
pond to wheel order A, B, 0, but also to some others; If, for 
Instance, the order C B A is found, one can easily obtain the 
wiring of C from one sequence belonging to this wheel order* 

After tne wirings of A, B, 0, and U had been determined, came 
the furtaer problem of studying the skipping motion of tne wheels 
In detail* The question calling for an answer was: at what posi- 
tion of A does B move one step? This cannot be determined from 
our previous theoretical considerations since we have arbitrarily 
considered a substitution Immediately after the simultaneous move- 
ment of all three wheels (0,0,0)* The considerations which 
finally led to solution of tills problem were in part rather com- 
plex and it would lead too far afield to reproduce them here. 
Essential was the fact that we knew the outer settings correspond- 
ing to our sequences* Use was also made of the fact that the 
orig inal wiring of 0 was known or at least suspected* 

In this stage of the work an Enigma with the recovered 
wirings and the recovered drlve-mechanlsm was constructed with 
which all messages received were readily read* 

This machine probably did not agree fully with the original 
for the wirings had not been uniquely determined by the sequences* 

In order to assure current reading of traffic even when the Inner 
setting was changed (the outer setting was supplied by an Indicator), 
It seemed desirable to see how our machine differed from the original* 
This was solved very quickly, because for setting the original a 
pronounoable four letter word was always chosen. 
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